CVE-2026-116054
Received Received - Intake

Password Hash with Insufficient Computational Effort in SH3

Publication date: 2026-10-25

Last updated on: 2026-10-25

Assigner: VulDB

Description
A security vulnerability has been detected in SH3. This affects an unknown function of the component Módulo de Gestão/Módulo de Arrecadação. The manipulation leads to password hash with insufficient computational effort. The attack is possible to be carried out remotely. A high degree of complexity is needed for the attack. The exploitability is reported as difficult. The exploit has been disclosed publicly and may be used. Upgrading to version 2026.0.2.0 mitigates this issue. Upgrading the affected component is recommended.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-25
Last Modified
2026-10-25
Generated
2026-10-25
AI Q&A
2026-10-25
EPSS Evaluated
N/A
NVD
CVE-2026-116054
EUVD
EUVD-2026-109546

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
n/a SH3 n/a

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-326 The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.
CWE-916 The product generates a hash for a password, but it uses a scheme that does not provide a sufficient level of computational effort that would make password cracking attacks infeasible or expensive.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability affects SH3 in an unknown function of the Módulo de Gestão/Módulo de Arrecadação component. It involves password hashes being generated with insufficient computational effort, making them easier to crack. The attack requires a high level of complexity and is rated as difficult to exploit, though a public exploit exists.

Impact Analysis

If exploited, this vulnerability could allow attackers to crack password hashes and gain unauthorized access to the system. Since the attack is remote and requires high complexity, the risk is moderate but not negligible. Upgrading to version 2026.0.2.0 is recommended to mitigate the issue.

Mitigation Strategies

Upgrade the affected component to version 2026.0.2.0 or later to mitigate the vulnerability. Ensure the Módulo de Gestão/Módulo de Arrecadação is updated as soon as possible.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-116054. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart